Koozali.org: home of the SME Server

PPTP stopped working

Kevin

PPTP stopped working
« on: July 12, 2002, 11:55:38 PM »
This subject has been beat to death, but I simply cannot find my answer:

Work SME 5.5 Server---> Internet ---> Home SME 5.5 Server ---> XP workstation

Like I said, this used to work.  What has changed?  Work SME and Home SME upgraded to 5.5 from 5.1.2 and my DSL modem was replaced.  Frought with config settings, I'm hoping you can figue out if I've missed one.

Work SME settings:
     PPTP: 2 connection
     User Account created

DSL firewall/modem setting at Work:
     forward tcp 1723 to external SME interface
     forward protocol 47 to external SME interface

Home SME settings:
     No port forwarding setup since I believe all connections should inside initiated

XP Workstation settings:
     Built PPTP connection - vanilla
     Tried with/with out compression
     Tried with/without encryption

I am definitely talking with the work SME server.  If I put in an invalid userid/password, I get "Access was denied because username and or password was incorrect."  If I use a valid ID, I get "a connection to the remote computer could not be established."

Here is what I am seeing in the messages log on the Work SME:

Jul 12 11:50:16 sentry pptpd[9968]: CTRL: Received PPTP Control Message (type: 15)
Jul 12 11:50:16 sentry pptpd[9968]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Jul 12 11:50:16 sentry pptpd[9968]: CTRL: Received PPTP Control Message (type: 15)
Jul 12 11:50:16 sentry pptpd[9968]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jul 12 11:50:16 sentry pppd[9969]: MSCHAP-v2 peer authentication succeeded for kjarrard
Jul 12 11:50:16 sentry pptpd[9968]: CTRL: Received PPTP Control Message (type: 15)
Jul 12 11:50:16 sentry pptpd[9968]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Jul 12 11:50:16 sentry pppd[9969]: LCP terminated by peer (^Jg^DM-^A^@
     _
Why is LCP terminating my connection If I am properly authenticated?  This all worked when I was running 5.1.2.

Kevin

ryan

Re: PPTP stopped working
« Reply #1 on: July 15, 2002, 02:55:02 AM »
I had a similar problem with an XP pro laptop, only difference I have is no firewall/DSL device since SME can do this just fine.

In my situation, the XP pro user was logged into XP using the same username and password as on the SME server.  PPTP failed.

When the XP pro user used a different pptp username and password (but did not use a different XP login), the connection works.  So, this tells me that you can't be logged into XP with the same login account you attempt to connect with PPTP to an SME server?  Since using a different pptp user account works, I did not attempt to find the techincal reason the first attempt failed.  Hope this helps you.  

By the way, you have applied the XP registry hack for SMB to SME?

RS

Kevin

Re: PPTP stopped working
« Reply #2 on: July 16, 2002, 05:56:50 AM »
Hmmm.  I wish that would fix things for me, but I am using a different PPTP UserID than the one I log into my XP box with.

I'm not sure which registry hack you are speaking of.

If I do a sniff of the connection, can someone tell me what is going on?  I'm fairly adept in the area of NT/2k/XP administration, but sniffing is out of my league.  I found a webpage that indicated the problem was related to XP trying to setup an IPSEC connection first.  I'm not sure that is the case, however, as I have the PPTP connectoid hard set to PPTP.  Maybe it's a timeout issue.  I think I might plumb the registry depths and see if I can make the timeout on connection failure a bit longer and see if that helps.

Kevin